Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b02e962c-63a4-483f-a32d-edd69698f920.roa
File: b02e962c-63a4-483f-a32d-edd69698f920.roa (raw, json)
Hash identifier: vWXVQ0EMuFpYFa32J2O/VFOCEGcvpU2/UgDJ22jfwi8=
Subject key identifier: 74:F5:F9:B4:08:3C:5F:1F:68:D1:0A:72:5C:09:C1:99:50:9A:9F:29
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3E22249D7D0FB553D45E29395448354CD79C5839
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b02e962c-63a4-483f-a32d-edd69698f920.roa
Signing time: Tue 14 Oct 2025 23:51:13 +0000
ROA not before: Tue 14 Oct 2025 23:51:13 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:22:24:9d:7d:0f:b5:53:d4:5e:29:39:54:48:35:4c:d7:9c:58:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:51:13 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=3af679401c372763bd2c3c009a70aed2d5262472c200abb5c8a8cef1a220ea2c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:6e:37:99:a2:a3:5e:63:97:d0:b4:0e:92:
4b:fa:7f:e2:44:82:8a:41:06:45:73:d3:93:ed:42:
a6:9e:f8:e0:56:a8:e8:b9:80:e6:e3:65:e9:34:04:
4f:83:dd:f0:e4:91:c5:c1:87:e4:69:62:6d:1a:00:
50:b7:44:b5:f8:03:af:af:7d:59:00:e7:92:69:35:
2f:21:0f:2a:50:84:95:4b:be:d2:b6:96:1a:78:fc:
d7:e4:40:c7:92:74:e2:22:6a:38:ad:ee:92:1f:c0:
77:5d:ab:b2:a3:08:da:bd:d3:a6:9b:33:b1:ef:eb:
54:5d:42:91:38:2f:80:0e:80:99:82:3f:f0:35:89:
14:7d:ac:d1:bf:a5:ef:92:e2:a9:b6:af:b8:b2:51:
6b:c3:0b:73:8a:ed:8c:12:bf:5e:f0:bf:a9:a0:54:
73:0a:08:da:a3:de:9a:44:be:01:8a:f0:d1:ac:44:
93:d9:c3:d3:3d:13:04:e3:43:94:8f:f8:df:a3:90:
7b:fb:f3:06:4a:2b:b9:f1:2d:74:62:84:ed:3b:ec:
3a:30:b1:60:67:83:01:84:51:8b:ee:b3:b3:83:6a:
7d:ee:e8:9d:c8:df:c4:f8:91:f3:ff:66:61:3e:21:
20:26:b0:c7:6c:9e:b7:17:34:4d:88:23:32:03:08:
31:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:F9:B4:08:3C:5F:1F:68:D1:0A:72:5C:09:C1:99:50:9A:9F:29
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b02e962c-63a4-483f-a32d-edd69698f920.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c3:04:4e:ca:32:58:61:e3:75:39:f0:b1:b8:ae:1d:7a:3e:
de:e5:82:78:3e:f0:f5:14:80:46:1b:94:21:13:f2:36:f6:12:
48:b3:15:24:ab:2f:a8:df:b6:74:22:4c:42:57:c9:d1:a7:06:
08:a1:88:b7:e9:07:3d:04:66:c7:27:e3:dc:eb:2d:73:8c:18:
fc:5e:89:69:c2:3b:a0:65:86:c8:45:d4:69:e7:fe:e8:05:5b:
41:e3:e2:54:0d:c4:41:6f:42:aa:f4:08:27:f2:12:31:85:a5:
e8:03:51:80:69:63:9a:ab:54:8f:17:70:24:7b:8d:42:92:b5:
0a:d4:78:31:52:20:e8:c7:40:f0:bd:7b:ec:21:cd:15:6b:cd:
ec:03:5f:00:93:30:23:02:a5:7e:09:11:9e:15:a5:3c:74:22:
fc:dd:c2:c6:4c:b1:6a:f4:c3:1f:5e:d6:93:28:37:f6:d1:96:
b5:2b:f0:b4:f5:2c:59:ac:ad:d0:0e:ec:7a:1e:92:85:50:1c:
00:0f:27:40:8d:df:fb:d0:e4:09:9f:2d:8b:d8:05:f6:f4:2b:
e2:57:5a:96:9a:c8:80:ee:32:fa:43:25:0e:e4:1f:97:7d:18:
87:1c:55:9f:84:6d:b0:4a:fa:cb:35:9e:1a:dc:8f:b0:df:f5:
9f:78:ef:e2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPiIknX0PtVPUXik5VEg1TNecWDkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjM1MTEzWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYWY2Nzk0MDFjMzcyNzYzYmQyYzNjMDA5YTcwYWVkMmQ1
MjYyNDcyYzIwMGFiYjVjOGE4Y2VmMWEyMjBlYTJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJ3W43maKjXmOX0LQOkkv6f+JEgopBBkVz05PtQqae+OBW
qOi5gObjZek0BE+D3fDkkcXBh+RpYm0aAFC3RLX4A6+vfVkA55JpNS8hDypQhJVL
vtK2lhp4/NfkQMeSdOIiajit7pIfwHddq7KjCNq906abM7Hv61RdQpE4L4AOgJmC
P/A1iRR9rNG/pe+S4qm2r7iyUWvDC3OK7YwSv17wv6mgVHMKCNqj3ppEvgGK8NGs
RJPZw9M9EwTjQ5SP+N+jkHv78wZKK7nxLXRihO077DowsWBngwGEUYvus7ODan3u
6J3I38T4kfP/ZmE+ISAmsMdsnrcXNE2IIzIDCDGzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdPX5tAg8Xx9o0QpyXAnBmVCanykwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IwMmU5NjJjLTYzYTQtNDgzZi1hMzJkLWVkZDY5Njk4ZjkyMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVrgwDQYJKoZIhvcNAQELBQADggEBAHrDBE7KMlhh43U58LG4rh16Pt7l
gng+8PUUgEYblCET8jb2EkizFSSrL6jftnQiTEJXydGnBgihiLfpBz0EZscn49zr
LXOMGPxeiWnCO6BlhshF1Gnn/ugFW0Hj4lQNxEFvQqr0CCfyEjGFpegDUYBpY5qr
VI8XcCR7jUKStQrUeDFSIOjHQPC9e+whzRVrzewDXwCTMCMCpX4JEZ4VpTx0Ivzd
wsZMsWr0wx9e1pMoN/bRlrUr8LT1LFmsrdAO7HoekoVQHAAPJ0CN3/vQ5AmfLYvY
Bfb0K+JXWpaayIDuMvpDJQ7kH5d9GIccVZ+EbbBK+ss1nhrcj7Df9Z947+I=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:17 2025 by rpki-client